[Samba] "Samba cannot handle GPO restrictions"

[Rowland penny]

On 05/06/16 17:32, Viktor Trojanovic wrote:
>> On 04 Jun 2016, at 22:14, Miguel Medalha <medalist at sapo.pt> wrote:
>>
>>
>>> Can someone therefore please explain to me what exactly these GPO
>>> restrictions are that Samba can't handle? I'd also appreciate if someone
>>> could list which other GPO I cannot set successfully using RSAT.
>> It seems to me that the FAQ is pretty clear. The paragraph you quoted from ends like this:
>>
>> "It [Samba] only serves GPOs via the SysVol share."
>>
>>  From the above statement one can infer that the relevant Microsoft documentation should be consulted in order to know which GPOs are served via the SysVol share. Those, and only those, are the GPOs Samba serves. Any other GPOs that Microsoft products eventually serve through other methods are not served by Samba. Really simple, isn't it?
>>
> Since you like pointing out how clear and simple everything is for you, how about making things simpler for me and pointing me to this "relevant documentation"?
>
> And if you believe that one sentence hidden in a FAQ somewhere makes this whole issue crystal clear, well, let's just say that I disagree. A wiki page on GPOs with Samba where some of the main issues are described would be a lot more helpful. Maybe I'll create one myself once I'm clear on all the facts.

As far as I am aware, GPOs that affect clients should work, but any that 
are supposed to work on a DC won't. The main problem is the 
documentation could be a lot better, so, if you feel up to it Viktor, I 
am sure any contributions to the wiki about GPOs will be more than welcome.

Rowland